github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/sidecarInjectorWebhook/templates/deployment.yaml (about)

     1  ---
     2  # Source: istio/charts/sidecarInjectorWebhook/templates/deployment.yaml
     3  apiVersion: extensions/v1beta1
     4  kind: Deployment
     5  metadata:
     6    name: istio-sidecar-injector
     7    namespace: default
     8    labels:
     9      app: sidecarInjectorWebhook
    10      chart: sidecarInjectorWebhook
    11      heritage: Tiller
    12      release: istio
    13      istio: sidecar-injector
    14  spec:
    15    replicas: 1
    16    template:
    17      metadata:
    18        labels:
    19          app: sidecarInjectorWebhook
    20          chart: sidecarInjectorWebhook
    21          heritage: Tiller
    22          release: istio
    23          version: 1.1.0
    24          istio: sidecar-injector
    25        annotations:
    26          sidecar.istio.io/inject: "false"
    27          scheduler.alpha.kubernetes.io/critical-pod: ""
    28      spec:
    29        serviceAccountName: istio-sidecar-injector-service-account
    30        containers:
    31          - name: sidecar-injector-webhook
    32            image: "gcr.io/istio-release/sidecar_injector:master-latest-daily"
    33            imagePullPolicy: IfNotPresent
    34            args:
    35              - --caCertFile=/etc/istio/certs/root-cert.pem
    36              - --tlsCertFile=/etc/istio/certs/cert-chain.pem
    37              - --tlsKeyFile=/etc/istio/certs/key.pem
    38              - --injectConfig=/etc/istio/inject/config
    39              - --meshConfig=/etc/istio/config/mesh
    40              - --healthCheckInterval=2s
    41              - --healthCheckFile=/health
    42            volumeMounts:
    43            - name: config-volume
    44              mountPath: /etc/istio/config
    45              readOnly: true
    46            - name: certs
    47              mountPath: /etc/istio/certs
    48              readOnly: true
    49            - name: inject-config
    50              mountPath: /etc/istio/inject
    51              readOnly: true
    52            livenessProbe:
    53              exec:
    54                command:
    55                  - /usr/local/bin/sidecar-injector
    56                  - probe
    57                  - --probe-path=/health
    58                  - --interval=4s
    59              initialDelaySeconds: 4
    60              periodSeconds: 4
    61            readinessProbe:
    62              exec:
    63                command:
    64                  - /usr/local/bin/sidecar-injector
    65                  - probe
    66                  - --probe-path=/health
    67                  - --interval=4s
    68              initialDelaySeconds: 4
    69              periodSeconds: 4
    70            resources:
    71              requests:
    72                cpu: 10m
    73              
    74        volumes:
    75        - name: config-volume
    76          configMap:
    77            name: istio
    78        - name: certs
    79          secret:
    80            secretName: istio.istio-sidecar-injector-service-account
    81        - name: inject-config
    82          configMap:
    83            name: istio-sidecar-injector
    84            items:
    85            - key: config
    86              path: config
    87        affinity:      
    88          nodeAffinity:
    89            requiredDuringSchedulingIgnoredDuringExecution:
    90              nodeSelectorTerms:
    91              - matchExpressions:
    92                - key: beta.kubernetes.io/arch
    93                  operator: In
    94                  values:
    95                  - amd64
    96                  - ppc64le
    97                  - s390x
    98            preferredDuringSchedulingIgnoredDuringExecution:
    99            - weight: 2
   100              preference:
   101                matchExpressions:
   102                - key: beta.kubernetes.io/arch
   103                  operator: In
   104                  values:
   105                  - amd64
   106            - weight: 2
   107              preference:
   108                matchExpressions:
   109                - key: beta.kubernetes.io/arch
   110                  operator: In
   111                  values:
   112                  - ppc64le
   113            - weight: 2
   114              preference:
   115                matchExpressions:
   116                - key: beta.kubernetes.io/arch
   117                  operator: In
   118                  values:
   119                  - s390x